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AMENDMENTS TO THE CLAIMS 

In accordance with the PTO's amendment format, a detailed listing of all 
claims has been provided. A status identifier is provided for each claim in 
parentheses following each claim number. 



In the Claims: 

Claims 1-40 were previously pending. 
Claims 28-33 are allowed. 

Claims 1-20, 23, 25, 27, 34-38, and 40 are canceled. 

Claims 21, 24, 26, and 39 are currently amended. 

Claims 21-22, 24, 26, 28-33, and 39 are currently pending. 
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Listing of the Claims 



1-20. (Canceled) 



21. (Currently Amended) T he method of claim 20, 
A method of computing, comprising: 

generating, at a first computing device, a request to decrypt a first file; 

obtaining the file encryption key of the first file; and 

generating a transmission containing the file encryption key for forwarding 
to a second computing device with the request to decrypt the first file; 

wherein obtaining the file encryption key of the first file comprises 
obtaining the $EFS stream of the first file and extracting the file encryption key 
from the $EFS stream. 

22. (Original) The method of claim 21, wherein obtaining the file 
encryption key of the first file comprises invoking a remote file system operation. 

23. (Canceled) 
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24. (Currently Amended) A method of computing, comprising: 
generating, at a first computing device, a request to decrypt a first file; 
obtaining the file encryption key of the first file; and 

forwarding the file encryption key to a second computing device with the 
request to decrypt the first file; 

in response to the request, at the second computing device, 
creating a second file; 

copying metadata from the first file to the second file; 
decrypting the first file; 

writing contents of the first file to the second file; and 
replacing the first file with the second file; 

wherein obtaining the file encryption key of the first file comprises 
obtaining the $EFS stream of the first file and extracting the file encryption key 
from the $EFS stream . 

25. (Canceled) 

26. (Currently Amended) The method - of clairen ^ 
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A method of com putin g, comprising: 
generating, at a first computing device, a request to decrypt a first file; 
obtaining the file encryption key of the first file; and 
forwarding the file encryption key to a second computing device with the 
request to decrypt the first file; 

in response to the request, at the second computing device, 
creating a second file; 

copying metadata from the first file to the second file; 
decrypting the first file; 

writing contents of the first file to the second file; and 
replacing the first file with the second file; 
wherein obtaining the file encryption key of the first file comprises 
invoking a remote file system operation. 

27, (Canceled) 
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28, (Allowed) A method of adding a user to an encrypted file stored 
on a server, comprising: 

obtaining the $EFS stream of the encrypted file from the server; 
generating a DDF for the user; 

modifying the $EFS stream to include the DDF for the user; and 
writing the $EFS stream to the server. 

29. (Allowed) The method of claim 28, wherein obtaining the $EFS 
stream from the server comprises invoking a remote procedure call. 

30, (Allowed) The method of claim 28, wherein writing the $EFS 
stream to the server comprises invoking a remote procedure call. 

3 1 . (Allowed) A method of removing a user from an encrypted file 
stored on a server, comprising: 

obtaining the $EFS stream of the encrypted file from the server; 
locating a DDF corresponding to the user in the $EFS stream; 
modifying the $EFS stream to include the DDF for the user; and 
writing the $EFS stream to the server. 
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32. (Allowed) The method of claim 3 1, wherein obtaining the $EFS 
stream from the server comprises invoking a remote procedure call. 

33. (Allowed) The method of claim 3 1 , wherein writing the $EFS 
stream to the server comprises invoking a remote procedure call. 

34-38. (Canceled) 

39. (Currently Amended) A method of providing proof that a first 
computing device possesses a key for decrypting a file associated with a second 
computing device, comprising: 

at a first computing device: 

using a unique data stream as a nonce; 
determining a hash of the unique data stream; 
generating a signature of the hash; and 

transmitting, to the second computing device, the signature of the 
hash and a certificate associated with the key; and 
at the second computing device: 

verifying the signature of the hash; and 

comparing the received hash to a hash list associated with a second 
computing device; 
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wherein the unique data stream comprises an $EFS stream associated 
with the file . 

40. (Canceled) 



Lee s Hayes, pllc 



9 



